Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: Ls2tTgvjhieIhd+b0RPYs8rSerWMdLLT2RozhXn2FSw=
Subject key identifier: AD:7D:56:4E:A7:1D:AA:FE:4D:36:05:59:34:BD:E7:4D:D2:2D:05:CB
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 0194BD4EAE5CB166CA2B8F645764F353481E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 0FB3
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 1-ThtHy19ctjaQuYuBhqSQqIE9WU.roa (hash: V9qRoZ+PC8g7OlSlh2fBbc43/EN/zOPrb+QtN2UkltA=)
2: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (hash: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: ydaBh17RSec9yCO3ySKiGgxKgxfnfC2xV+IMuKLT9uY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ae:5c:b1:66:ca:2b:8f:64:57:64:f3:53:48:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=ad7d564ea71daafe4d36055934bde74dd22d05cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:7c:0a:30:07:80:0c:24:2b:41:42:d6:8b:
27:bb:3d:ba:d1:3b:c6:64:fc:6a:c3:a2:88:7c:68:
98:01:a2:c4:1d:58:d4:24:c4:10:d6:ac:a4:26:a9:
ba:08:99:1b:0d:c3:2e:e4:0f:3e:58:48:5e:61:65:
e9:2b:3a:98:0a:c9:c0:07:74:11:46:7a:1e:c1:55:
dc:a2:46:85:6d:ae:b7:80:58:d3:63:f3:6e:03:d5:
12:23:4d:a9:a7:b1:07:a5:21:c5:c0:a0:9a:97:3d:
6d:fd:fe:49:22:d1:56:3f:ff:9c:73:98:c4:eb:f6:
6e:f7:f5:e7:91:36:26:c4:bb:63:75:08:1f:a0:34:
0c:dc:34:73:ce:9f:1f:91:27:96:70:55:6e:06:bd:
02:19:f8:93:88:f0:57:0a:0a:fa:27:ec:83:29:29:
70:e0:b9:50:db:e4:d9:eb:48:ed:56:7c:d4:ae:77:
fb:65:32:50:fe:84:07:95:c4:4a:8c:59:b2:86:40:
cb:79:41:84:2b:0d:9c:a2:6b:bd:1e:84:dd:33:30:
1d:0c:e4:63:2b:00:46:b5:84:13:4e:f6:b2:b4:8e:
18:5e:a8:90:20:6b:1d:2e:60:74:88:31:ab:32:f1:
85:ea:79:e6:4a:5d:4d:47:8b:ed:f4:61:95:a5:c2:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7D:56:4E:A7:1D:AA:FE:4D:36:05:59:34:BD:E7:4D:D2:2D:05:CB
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a4:91:49:3e:f3:dd:bd:99:76:03:9e:98:ab:11:8d:0e:e5:
f3:cb:73:53:34:a8:bc:a2:cf:74:f4:ca:54:39:cf:3c:77:e6:
8a:f3:ac:1e:04:df:89:e1:37:92:8d:ce:98:2b:11:97:67:4b:
45:79:3f:c7:eb:bb:9c:e3:5d:c0:43:08:c4:4c:0e:31:42:a8:
e3:e4:88:5d:3d:c4:7e:59:dc:da:85:fa:c6:e9:a7:52:76:fb:
22:1b:1b:1d:a5:c9:09:0d:3b:f9:44:76:52:27:6c:2f:bb:6b:
ab:fe:13:c8:d4:a4:cb:b0:cd:dc:aa:c0:96:f3:01:2a:06:0c:
2f:34:58:19:a4:7b:72:7b:12:69:03:7f:fb:86:f1:2f:01:ec:
0d:e2:d8:b7:30:4c:d7:57:7e:86:75:39:31:11:f4:59:c7:0c:
24:2d:8c:04:37:bc:31:e0:16:81:23:fd:a1:03:f3:42:7f:e8:
cf:4f:71:39:9d:35:84:00:ab:63:55:ce:23:bf:1f:a5:ea:1b:
b5:26:2b:de:82:5c:82:6d:a9:a9:79:e2:c1:89:ed:49:7c:ac:
f5:05:26:fd:de:ec:38:15:31:f1:e1:4b:18:03:90:85:f9:f3:
20:73:b9:bb:ad:d4:a3:74:27:0b:7f:2d:1f:bb:f8:88:69:18:
e2:26:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:51 2025 by rpki-client